This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: fIdJDfP0xbFAqQRy2SF+ilUhw/jT+CFEYteJA/Arg/w= Subject key identifier: 03:7F:D8:DC:56:85:9A:40:6B:07:E7:1E:4D:3C:8E:68:13:50:71:88 Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 1B7E3B51BB64C72B3A1EB8AAC5B8FFBABDE6C859 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 01E2 Signing time: Thu 18 Dec 2025 11:10:45 +0000 Manifest this update: Thu 18 Dec 2025 11:05:45 +0000 Manifest next update: Sun 21 Dec 2025 19:39:45 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) 2: 3130332e35342e3137312e302f32342d3234203d3e20313431303731.roa (hash: A15JvoKxrrNNly8QbNKG17HNlGfUgFoFqcNw47K8k1o=) 3: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: HgTTmLPMXfzWKzhR5a9DF89GmYSrR9NDetNao/zzlWk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Dec 2025 19:39:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7e:3b:51:bb:64:c7:2b:3a:1e:b8:aa:c5:b8:ff:ba:bd:e6:c8:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Dec 18 11:05:45 2025 GMT Not After : Dec 21 19:39:45 2025 GMT Subject: CN=037FD8DC56859A406B07E71E4D3C8E6813507188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:94:a6:10:62:a6:3c:51:f4:80:fe:cf:8b:c4: 4f:cc:c8:69:e0:37:05:99:31:4c:d2:21:a9:d5:be: 32:3c:c1:92:ab:d0:21:86:54:4f:86:7d:49:5a:e0: 2d:7c:1b:1d:56:0e:d1:3f:da:14:1a:0c:42:b6:f8: ed:b8:d5:8d:23:62:ae:8a:80:59:d6:2e:87:a9:da: 18:8d:a6:50:b4:25:09:66:21:05:d6:86:5d:79:29: ab:1c:93:d2:9b:53:2f:46:15:0b:fb:ec:08:58:5f: f6:3b:e4:0e:55:50:1c:ce:d0:2c:d3:40:33:7f:87: ae:ea:fa:42:a3:4a:18:21:ef:83:5a:3b:a1:ec:52: f3:66:98:ca:19:c1:f5:b7:7d:3e:5c:c2:2d:b9:a7: 69:6a:0b:e8:91:a2:39:c2:03:4b:2d:2a:19:5b:6d: a7:d5:34:ef:d5:d5:72:21:12:63:90:c4:df:49:53: 57:9b:85:10:21:43:74:5c:54:5c:e7:ea:5e:b8:bc: b1:3f:d6:36:cb:9e:c0:06:39:69:0d:75:5c:18:7e: 60:ac:84:d2:50:68:92:64:39:ba:62:87:9a:a3:e8: 0e:32:a3:d1:1f:fd:48:3b:ce:f2:01:9b:19:f6:1a: 5c:2f:9f:dc:4b:14:f0:24:96:b8:92:d0:30:0f:5c: a0:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:D8:DC:56:85:9A:40:6B:07:E7:1E:4D:3C:8E:68:13:50:71:88 X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9b:78:1c:6a:55:93:3f:b2:64:d9:ba:2a:18:28:dc:ac:96: 34:62:37:7f:48:87:b6:f2:7f:3d:b8:7e:7a:2e:22:7f:d2:cb: e8:e5:ad:9b:67:23:00:c5:11:38:09:db:7b:83:60:27:7b:82: 5b:37:d4:be:31:91:66:2d:d1:9f:9b:6c:c5:1c:68:d2:b0:21: 01:94:b6:70:10:8e:38:62:46:26:8d:de:f0:60:4e:e1:fe:d7: 38:5a:ad:d7:a6:25:24:36:73:92:14:84:47:84:b6:44:fe:5a: 9f:26:b6:da:a5:10:0c:88:1a:a0:5e:6d:f2:02:a7:c4:4b:40: 63:4a:87:b8:23:39:04:3f:88:e3:02:cc:56:08:17:8e:99:ad: fe:cc:17:e8:26:55:f1:a4:af:fb:a1:66:c6:b8:5b:13:99:5e: 62:6e:6f:fb:77:92:09:a3:40:1d:9e:de:16:8b:d6:b7:69:37: e4:c8:32:31:35:25:6c:45:f8:f9:41:66:3c:de:68:82:59:0d: e3:78:13:bd:71:fe:24:23:ad:24:2d:7b:02:de:a4:05:33:2b: d1:49:45:74:10:92:1c:eb:17:f2:39:7f:a0:81:1a:c1:61:8c: eb:75:56:d8:be:c1:2a:15:20:31:92:28:5e:f5:f7:9d:04:90: b3:dd:27:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG347Ubtkxys6Hriqxbj/ur3myFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTEyMTgxMTA1NDVaFw0yNTEyMjExOTM5NDVaMDMxMTAvBgNV BAMTKDAzN0ZEOERDNTY4NTlBNDA2QjA3RTcxRTREM0M4RTY4MTM1MDcxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlKYQYqY8UfSA/s+LxE/MyGng NwWZMUzSIanVvjI8wZKr0CGGVE+GfUla4C18Gx1WDtE/2hQaDEK2+O241Y0jYq6K gFnWLoep2hiNplC0JQlmIQXWhl15Kasck9KbUy9GFQv77AhYX/Y75A5VUBzO0CzT QDN/h67q+kKjShgh74NaO6HsUvNmmMoZwfW3fT5cwi25p2lqC+iRojnCA0stKhlb bafVNO/V1XIhEmOQxN9JU1ebhRAhQ3RcVFzn6l64vLE/1jbLnsAGOWkNdVwYfmCs hNJQaJJkObpih5qj6A4yo9Ef/Ug7zvIBmxn2Glwvn9xLFPAklriS0DAPXKCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3/Y3FaFmkBrB+ceTTyOaBNQcYgwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKibeBxqVZM/smTZuioYKNysljRiN39Ih7by fz24fnouIn/Sy+jlrZtnIwDFETgJ23uDYCd7gls31L4xkWYt0Z+bbMUcaNKwIQGU tnAQjjhiRiaN3vBgTuH+1zhardemJSQ2c5IUhEeEtkT+Wp8mttqlEAyIGqBebfIC p8RLQGNKh7gjOQQ/iOMCzFYIF46Zrf7MF+gmVfGkr/uhZsa4WxOZXmJub/t3kgmj QB2e3haL1rdpN+TIMjE1JWxF+PlBZjzeaIJZDeN4E71x/iQjrSQtewLepAUzK9FJ RXQQkhzrF/I5f6CBGsFhjOt1Vti+wSoVIDGSKF71950EkLPdJ5s= -----END CERTIFICATE-----Generated at Sat Dec 20 06:02:12 2025 by rpki-client